Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa
File:                     782138f7-06c6-3929-96a7-c3ac5434cee1.roa (raw, json)
Hash identifier:          qchLvLITBvifxZwz/HVOWA6dLsHXuA37pmhJ88u7DWg=
Subject key identifier:   2A:1B:B6:98:33:03:E9:56:13:A8:A7:ED:D7:F5:BF:29:09:90:CD:FD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42357588E627B021223B240
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa
Signing time:             Wed 19 Aug 2026 18:04:01 +0000
ROA not before:           Wed 19 Aug 2026 18:04:01 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:57:58:8e:62:7b:02:12:23:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:01 2026 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=a5483780-21b7-46d6-90f6-387c083c6c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:ae:d2:94:3c:50:f8:17:78:89:07:e5:85:
                    77:87:09:26:80:e2:91:61:14:1b:bf:7e:b2:2c:b4:
                    39:52:ef:57:90:28:ba:69:cf:d2:77:a5:4b:13:77:
                    38:13:81:c2:b2:96:99:71:ee:8a:49:31:0c:0a:ee:
                    8b:ed:97:52:1d:7e:83:d1:40:b9:16:d5:4b:b1:b4:
                    fa:79:44:e8:d1:36:d6:b4:c4:85:d8:e1:20:e6:1a:
                    d7:3b:ee:00:68:b5:97:e4:2c:19:bf:7e:3c:f1:27:
                    08:19:f6:30:06:24:38:e8:31:89:d9:5c:fa:d4:75:
                    75:f4:f7:64:01:ef:99:19:d8:42:f9:f8:de:8c:ee:
                    de:cc:20:10:49:24:57:1e:52:14:5e:7d:8d:ee:5b:
                    45:e2:31:1d:33:b3:80:6e:8a:f6:2d:54:92:e4:f4:
                    64:c8:c4:39:c1:d6:30:02:f5:64:b5:17:87:0f:8f:
                    e7:d8:2e:1b:f7:44:03:fb:b4:48:fa:45:bd:9f:31:
                    2e:4d:32:ea:ef:96:66:84:b1:76:4e:06:f1:68:73:
                    4d:2e:87:0f:e5:c4:a2:ef:38:e6:f4:8f:d0:a4:c2:
                    6a:a0:bc:ce:9f:2a:46:4c:73:7f:d3:5e:27:0e:37:
                    7c:06:f4:95:38:a0:f2:3c:36:d7:ac:c3:87:f8:6a:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1B:B6:98:33:03:E9:56:13:A8:A7:ED:D7:F5:BF:29:09:90:CD:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:5f:fd:b9:74:f0:1c:08:16:be:14:6f:ce:e4:4b:06:50:
         4d:13:cc:30:d9:46:e8:a4:30:30:76:f3:51:3c:d5:80:45:de:
         9b:40:d2:66:72:3a:2c:ec:94:f1:01:43:e5:24:e4:12:dc:2d:
         c3:9e:9b:e4:9d:92:3c:1b:62:8b:ac:b9:18:a8:c0:f1:87:78:
         21:21:e2:eb:43:fc:0e:56:3e:e9:bc:2e:d0:d3:73:35:cd:f0:
         8c:c1:09:c8:27:1c:4b:30:d4:03:dc:dc:1f:e8:89:d6:c7:87:
         4d:88:98:93:66:43:8b:b4:7a:ac:45:b1:4e:13:ba:ff:a0:c8:
         10:84:f9:38:8f:f6:d7:dc:b0:3c:f9:b9:cf:eb:af:c7:53:f2:
         10:28:50:62:da:ed:ad:59:34:2c:66:d0:9d:7f:f0:84:76:9b:
         8b:01:d9:16:de:5a:57:cf:31:1a:8b:dc:f2:76:f6:9a:1d:fb:
         24:5c:a0:ae:a5:c7:8c:e6:c0:fa:61:9d:66:a5:37:d6:27:4c:
         78:70:37:7b:32:ea:6e:93:7c:96:18:fc:aa:73:16:7c:d2:3a:
         07:c9:7c:2e:92:9a:29:5d:ae:19:48:d7:67:b7:ea:b1:a2:d9:
         d8:d1:e5:cd:8c:fa:84:38:fb:49:45:91:e4:fd:e9:2d:2e:83:
         44:be:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:02:17 2026 by rpki-client